program: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @struct]}}, &(0x7f0000000140)=""/226, 0x3a, 0xe2, 0x1, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x63e4b27f, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(0x0, 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) inotify_init1(0x1800) socket(0x3, 0x80000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[]) [ 74.665194][ T5304] Bluetooth: hci0: command tx timeout [ 74.764885][ C0] hrtimer: interrupt took 63034 ns [ 77.068168][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.071304][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.088994][ T5304] Bluetooth: hci0: command tx timeout [ 77.892234][ T5325] ------------[ cut here ]------------ [ 77.895132][ T5325] WARNING: CPU: 0 PID: 5325 at kernel/events/core.c:7211 perf_pending_task+0x319/0x400 [ 77.899400][ T5325] Modules linked in: [ 77.901154][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 77.905741][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.910321][ T5325] RIP: 0010:perf_pending_task+0x319/0x400 [ 77.912864][ T5325] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 21 4f cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4e 34 76 09 cc e8 08 4f cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 77.922908][ T5325] RSP: 0018:ffffc9000d45f9d0 EFLAGS: 00010293 [ 77.926772][ T5325] RAX: ffffffff81f2fe18 RBX: dffffc0000000000 RCX: ffff8880002b8000 [ 77.930270][ T5325] RDX: 0000000000000000 RSI: 000000007e3fb2d7 RDI: 0000000000000000 [ 77.933746][ T5325] RBP: 000000007e3fb2d7 R08: ffffc9000d45f987 R09: 0000000000000000 [ 77.937634][ T5325] R10: ffffc9000d45f940 R11: ffffffff81f2fb00 R12: 1ffff110035f790f [ 77.941105][ T5325] R13: ffff8880002b8000 R14: ffff88801afbcad8 R15: ffff88801afbc878 [ 77.945182][ T5325] FS: 0000000000000000(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 77.949051][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.951995][ T5325] CR2: 00007ff4c15cc9a0 CR3: 00000000512ef000 CR4: 0000000000352ef0 [ 77.955858][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.959534][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.963601][ T5325] Call Trace: [ 77.965514][ T5325] [ 77.966879][ T5325] task_work_run+0x1d1/0x260 [ 77.969092][ T5325] ? __pfx_task_work_run+0x10/0x10 [ 77.971348][ T5325] do_exit+0x6b5/0x22e0 [ 77.973203][ T5325] ? irqentry_exit+0x74/0x90 [ 77.975787][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.977982][ T5325] ? __pfx_do_exit+0x10/0x10 [ 77.979741][ T5325] do_group_exit+0x21c/0x2d0 [ 77.981768][ T5325] get_signal+0x1286/0x1340 [ 77.983751][ T5325] arch_do_signal_or_restart+0x9a/0x750 [ 77.986133][ T5325] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.988688][ T5325] ? irqentry_exit+0x74/0x90 [ 77.990751][ T5325] exit_to_user_mode_loop+0x75/0x110 [ 77.993464][ T5325] do_syscall_64+0x2bd/0x3b0 [ 77.995856][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.998185][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.000827][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 78.003153][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.006100][ T5325] RIP: 0033:0x7ff4c078e929 [ 78.007993][ T5325] Code: Unable to access opcode bytes at 0x7ff4c078e8ff. [ 78.010808][ T5325] RSP: 002b:00007ff4c15ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 78.014272][ T5325] RAX: 0000000000000004 RBX: 00007ff4c09b5fa0 RCX: 00007ff4c078e929 [ 78.017508][ T5325] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 78.020977][ T5325] RBP: 00007ff4c0810b39 R08: 0000000000000000 R09: 0000000000000000 [ 78.024696][ T5325] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 78.028274][ T5325] R13: 0000000000000000 R14: 00007ff4c09b5fa0 R15: 00007ffe4c569ec8 [ 78.031799][ T5325] [ 78.033410][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.037565][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 78.041844][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.046543][ T5325] Call Trace: [ 78.048053][ T5325] [ 78.049394][ T5325] dump_stack_lvl+0x99/0x250 [ 78.051405][ T5325] ? __asan_memcpy+0x40/0x70 [ 78.053590][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.055904][ T5325] ? __pfx__printk+0x10/0x10 [ 78.057821][ T5325] panic+0x2db/0x790 [ 78.059467][ T5325] ? __pfx_panic+0x10/0x10 [ 78.061360][ T5325] __warn+0x31b/0x4b0 [ 78.063110][ T5325] ? perf_pending_task+0x319/0x400 [ 78.065371][ T5325] ? perf_pending_task+0x319/0x400 [ 78.067544][ T5325] report_bug+0x2be/0x4f0 [ 78.069383][ T5325] ? perf_pending_task+0x319/0x400 [ 78.071470][ T5325] ? perf_pending_task+0x319/0x400 [ 78.073635][ T5325] ? perf_pending_task+0x31b/0x400 [ 78.075774][ T5325] handle_bug+0x84/0x160 [ 78.077789][ T5325] exc_invalid_op+0x1a/0x50 [ 78.080271][ T5325] asm_exc_invalid_op+0x1a/0x20 [ 78.082565][ T5325] RIP: 0010:perf_pending_task+0x319/0x400 [ 78.085307][ T5325] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 21 4f cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4e 34 76 09 cc e8 08 4f cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 78.093963][ T5325] RSP: 0018:ffffc9000d45f9d0 EFLAGS: 00010293 [ 78.097226][ T5325] RAX: ffffffff81f2fe18 RBX: dffffc0000000000 RCX: ffff8880002b8000 [ 78.101396][ T5325] RDX: 0000000000000000 RSI: 000000007e3fb2d7 RDI: 0000000000000000 [ 78.105016][ T5325] RBP: 000000007e3fb2d7 R08: ffffc9000d45f987 R09: 0000000000000000 [ 78.108641][ T5325] R10: ffffc9000d45f940 R11: ffffffff81f2fb00 R12: 1ffff110035f790f [ 78.112104][ T5325] R13: ffff8880002b8000 R14: ffff88801afbcad8 R15: ffff88801afbc878 [ 78.115541][ T5325] ? __pfx_perf_pending_task+0x10/0x10 [ 78.117894][ T5325] ? perf_pending_task+0x318/0x400 [ 78.120041][ T5325] task_work_run+0x1d1/0x260 [ 78.121986][ T5325] ? __pfx_task_work_run+0x10/0x10 [ 78.124199][ T5325] do_exit+0x6b5/0x22e0 [ 78.126110][ T5325] ? irqentry_exit+0x74/0x90 [ 78.128255][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.130620][ T5325] ? __pfx_do_exit+0x10/0x10 [ 78.132502][ T5325] do_group_exit+0x21c/0x2d0 [ 78.134531][ T5325] get_signal+0x1286/0x1340 [ 78.136583][ T5325] arch_do_signal_or_restart+0x9a/0x750 [ 78.138991][ T5325] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 78.141681][ T5325] ? irqentry_exit+0x74/0x90 [ 78.143904][ T5325] exit_to_user_mode_loop+0x75/0x110 [ 78.146613][ T5325] do_syscall_64+0x2bd/0x3b0 [ 78.149507][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.152787][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.155766][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 78.157847][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.160489][ T5325] RIP: 0033:0x7ff4c078e929 [ 78.162608][ T5325] Code: Unable to access opcode bytes at 0x7ff4c078e8ff. [ 78.166280][ T5325] RSP: 002b:00007ff4c15ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 78.171370][ T5325] RAX: 0000000000000004 RBX: 00007ff4c09b5fa0 RCX: 00007ff4c078e929 [ 78.175683][ T5325] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 78.179631][ T5325] RBP: 00007ff4c0810b39 R08: 0000000000000000 R09: 0000000000000000 [ 78.183163][ T5325] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 78.186612][ T5325] R13: 0000000000000000 R14: 00007ff4c09b5fa0 R15: 00007ffe4c569ec8 [ 78.190017][ T5325] [ 78.191714][ T5325] Kernel Offset: disabled [ 78.193690][ T5325] Rebooting in 86400 seconds..